A few days before his disappearance, someone replied to a tweet from Malcolm's Twitter account @NoahArticulates with a link to what appeared to be a Human Rights Watch video. This link has been used in an attempt to gather technical information which may have contributed to his identification or geolocation. Amnesty International's Security Lab identified two more domains related to this campaign which may have been used in the same way.